Dual WANS and Gateway Question

[Wasca]

Hi

I'm planning on setting up a PFSense 1.2 Firewall and have a quick question about the Gateway options in the Interface setup.

In my setup, WAN is an ADSL2+ connection, I'm going to get PFSense to do the PPP connection and have the ADSL2+ modem in bridged mode. OPT1 (WAN2) is a static IP, 10Mbit symetrical connection. I also have a LAN, and OPT2 subnets.

By default do all LAN clients use the WAN interface to get on the internet? and if I wanted all the LAN clients to use (OPT1)WAN2 how would I do that? My first guess is via the LAN Firewall Rules, is that correct?

Next, how would I make sure that all the OPT2 clients use the WAN connection to get on the internet? Do I simply type in the next hop router IP of my WAN (ADSL2+) connection. i.e. my ISP's router?

Thanks

[Perry]

By default do all LAN clients use the WAN interface to get on the internet?

Yes because the default rule is set to use the default gateway *

if I wanted all the LAN clients to use (OPT1)WAN2 how would I do that? My first guess is via the LAN Firewall Rules, is that correct?

Yes change the gateway to WAN2

Next, how would I make sure that all the OPT2 clients use the WAN connection to get on the internet? Do I simply type in the next hop router IP of my WAN (ADSL2+) connection. i.e. my ISP's router?

Add a LAN2 net rule with the default gateway.

You might need System -> Static Routes

WAN      WAN ISP DNS 1      WAN gateway
WAN      WAN ISP DNS 2      WAN gateway
WAN2    WAN2 ISP DNS 1      WAN2 gateway
WAN2    WAN2 ISP DNS 2      WAN2 gateway

[sai]

@Perry:

You might need System -> Static Routes

WAN      WAN ISP DNS 1      WAN gateway
WAN      WAN ISP DNS 2      WAN gateway
WAN2     WAN2 ISP DNS 1      WAN2 gateway
WAN2     WAN2 ISP DNS 2      WAN2 gateway

I have been playing with static routes and it seems to me that it doesnt matter which interface you set on the static route. the routing table looks the same.

could any one comment on this pls? did I miss something?

[hoba]

Can you show us what you did and what looks the same? Some ISPs have their dns servers directly in the same subnet like the IP that you get from them. In that case no route is needed of course.